Government and Public Sector - Cybersecurity Risk and Change Management Senior Consultant
About the role
The Risk and Change Management Senior Consultant at EY provides expert risk management and change management services to ensure alignment with organizational objectives, regulatory compliance, and operational excellence. This hybrid role combines strategic risk oversight with operational change management, enabling seamless transitions and mitigating risks associated with deployments, new initiatives, and system enhancements.
Responsibilities
Manage the ESSD ICAM Risk Register, ensuring risks are reviewed, analyzed, and updated regularly in Maestro JIRA.
Facilitate weekly Risk Review meetings to assess risks with statuses such as "Identified," "Assigned," "Analyzed," "Monitoring," and "Escalated."
Analyze new risks, add treatment and contingency plans, set priority levels, and assign risks to appropriate team members.
Monitor risks with upcoming or past expiration dates, ensuring timely updates and mitigation strategies.
Provide expert guidance on risk mitigation strategies, ensuring alignment with ICAM objectives and compliance with client regulatory requirements.
Collaborate with stakeholders to identify potential risks in deployments, system changes, and enhancements, optimizing process efficiency and designing effective controls.
Act as a thought leader in risk management, building credibility and fostering strong relationships across teams.
Coordinate and facilitate weekly Change Review Board (CRB) meetings, ensuring all Change Requests (CRs) are reviewed, prioritized, and assigned appropriately.
Review CRs with statuses such as "Ready for CRB" and "Submitted," ensuring proper categorization and readiness for review.
Update CR tickets in Maestro JIRA with comments, priority levels, sprint team assignments, and relevant dependencies.
Ensure compliance with ITIL best practices and client change management standards.
Maintain change records in the ITSM Service Management tool to comply with SLAs/KPIs and organizational processes.
Conduct Post Implementation Reviews (PIRs) for failed or emergency changes, identifying root causes and recommending improvements.
Manage Deployment Change Requests (DCRs), micro Deployment Change Requests (mDCRs), Maintenance Change Requests (MCRs), and Emergency Change Requests (ECRs) for ICAM systems.
Facilitate Test Deployment Planning (DP) and Production Deployment Planning (DP) meetings, ensuring deployment plans are reviewed, resources are available, and technical artifacts are validated.
Schedule and coordinate Maintenance Windows (MWs) for system deployments, ensuring all required attendees are present and deployment plans are executed efficiently.
Review deployment artifacts, update deployment plans during maintenance windows, and ensure rollback plans are in place.
Use MS Teams to monitor deployment requests and facilitate communication between Scrum Masters, Product Owners, and technical teams.
Ensure deployment calendars are updated regularly and align with client schedules.
Provide internal communications to stakeholders, including system owners, regarding deployment status, completion, and any issues encountered.
Requirements
Strong understanding of risk management principles, frameworks, and regulatory requirements.
Comprehensive knowledge of ITIL processes, particularly Change Management, with certification preferred.
Familiarity with the Software Development Lifecycle and operational environments within DHS ESSD ICAM.
Advanced interpersonal skills to engage stakeholders across all levels of the organization, fostering collaboration and building credibility.
Proven ability to analyze complex issues, identify solutions, and negotiate resolutions in a dynamic environment.
Excellent oral, written, and presentation skills, with the ability to adapt communication style to diverse audiences.
Strong analytical and problem-solving skills, with experience in data-driven decision-making.
Proficiency in Microsoft Office tools (Excel, Visio, PowerPoint) and knowledge-sharing platforms like SharePoint.
Ability to work in rotational shifts and weekends as required.
At least 4-5 years of relevant consulting or industry experience.
Ability to obtain/maintain a secret level clearance.
Experience in risk management, change management, or a related field, preferably within DHS or a federal agency.
Experience working in a geographically dispersed and diverse team environment.
Strong capabilities in communications and engagement strategy and delivery.
Knowledge of hybrid workforce strategy.
The ability and willingness to work in excess of standard hours when necessary to support production deployments.
Qualifications
Bachelor’s degree in information technology, Business or other relevant discipline.
At least 4-5 years of relevant consulting or industry experience.
Ability to obtain/maintain a secret level clearance.
Experience in risk management, change management, or a related field, preferably within DHS or a federal agency.
Experience working in a geographically dispersed and diverse team environment.
Strong capabilities in communications and engagement strategy and delivery.
Knowledge of hybrid workforce strategy.
The ability and willingness to work in excess of standard hours when necessary to support production deployments.
Skills
Strong understanding of risk management principles, frameworks, and regulatory requirements.
Comprehensive knowledge of ITIL processes, particularly Change Management, with certification preferred.
Familiarity with the Software Development Lifecycle and operational environments within DHS ESSD ICAM.
Advanced interpersonal skills to engage stakeholders across all levels of the organization, fostering collaboration and building credibility.
Proven ability to analyze complex issues, identify solutions, and negotiate resolutions in a dynamic environment.
Excellent oral, written, and presentation skills, with the ability to adapt communication style to diverse audiences.
Strong analytical and problem-solving skills, with experience in data-driven decision-making.
Proficiency in Microsoft Office tools (Excel, Visio, PowerPoint) and knowledge-sharing platforms like SharePoint.
Ability to work in rotational shifts and weekends as required.
At least 4-5 years of relevant consulting or industry experience.
Ability to obtain/maintain a secret level clearance.
Experience in risk management, change management, or a related field, preferably within DHS or a federal agency.
Experience working in a geographically dispersed and diverse team environment.
Strong capabilities in communications and engagement strategy and delivery.
Knowledge of hybrid workforce strategy.
The ability and willingness to work in excess of standard hours when necessary to support production deployments.
Benefits
Our Total Rewards package includes medical and dental coverage, pension and 401(k) plans, and a wide range of paid time off options. Individual salaries within the specified ranges are determined through a wide variety of factors including but not limited to education, experience, knowledge, skills and geography.
Pay
The base salary range for this job in all geographic locations in the US is $104,800 to $192,200. The base salary range for New York City Metro Area, Washington State and California (excluding Sacramento) is $125,800 to $218,500.
Schedule
Our expectation is for most people in external, client serving roles to work together in person 40-60% of the time over the course of an engagement, project or year. Under our flexible vacation policy, you’ll decide how much vacation time you need based on your own personal circumstances. You’ll also be granted time off for designated EY Paid Holidays, Winter/Summer breaks, Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.